JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 204.12.251.145

204.12.251.145 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 32%: ?

32%

ISP	Cloud Clusters, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS32097
Domain Name	cloudclusters.io
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 204.12.251.145

Whois 204.12.251.145

IP Abuse Reports for 204.12.251.145:

This IP address has been reported a total of 11 times from 11 distinct sources. 204.12.251.145 was first reported on May 19th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-22 21:54:25 (1 month ago)	Reported from Nginx log analysis 19. Log: 204.12.251.145 - - [22/May/2026:xx:xx:xx 0200] "POST / HT ... show more Reported from Nginx log analysis 19. Log: 204.12.251.145 - - [22/May/2026:xx:xx:xx 0200] "POST / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 Assetnote/1.0" "-" "US United States -" "AS32097" "WholeSale Internet, Inc." show less	Port Scan Brute-Force SSH
🇩🇪 ManagedStack	2026-05-22 20:30:01 (1 month ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
Anonymous	2026-05-22 17:40:28 (1 month ago)	[Fri May 22 19:40:27.828532 2026] [:error] [pid 2727528:tid 2727528] [client 204.12.251.145:50328] M ... show more [Fri May 22 19:40:27.828532 2026] [:error] [pid 2727528:tid 2727528] [client 204.12.251.145:50328] ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i)\\x5cu[0-9a-f]{4}' against variable `ARGS:3' (Value: `{"\\"\\u0024\\u0024":{}}' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1315"] [id "920540"] [rev ""] [msg "Possible Unicode character bypass detected"] [data "ARGS:3={\\x22\\x5c\\x22\\x5cu0024\\x5cu0024\\x22:{}}"] [severity "2"] [ver "OWASP_CRS/4.27.0-dev"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/255/153/267/72"] [uri "/"] [unique_id "17794716271.548479"] [ref "o4,6v1042,21"] [Fri May 22 19:40:27.830061 2026] [:error] [pid 2727528:tid 2727528] [client 204.12.251.145:50328] ModSecurity: Warning. Matched "Operator `Rx' with pa ... show less	Web App Attack
🇩🇪 0x44	2026-05-22 17:01:49 (1 month ago)	Abusive host detected - Web probing for vulnerabilities	Web App Attack Hacking
🇫🇮 ngonghillsbikers	2026-05-22 11:00:04 (1 month ago)	Date: 22/May/2026:13:18:21.075843 +0300 \| Reported IP: 204.12.251.145 mod_security \| id: 920350 9491 ... show more Date: 22/May/2026:13:18:21.075843 +0300 \| Reported IP: 204.12.251.145 mod_security \| id: 920350 949110 980170 932130 933135 934100 934130 942550 920540 \| US/group.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; Warning. Pattern match; Warning. Pattern match; Warning. Pattern match; Warning. Pattern match; Warning. Pattern match; Warning. Pattern match; Warning. Pattern match; Warning. Pattern match; Warning. Pattern match; Warning. Pattern match; Warning. Pattern match; Warning. Pattern match; Warning. Unconditional match in SecAction. [file; Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file show less	SQL Injection Brute-Force Bad Web Bot
🇳🇱 ByeByte API	2026-05-22 09:03:18 (1 month ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 443. Single burst at 2026 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 443. Single burst at 2026-05-22 09:03 UTC. show less	Port Scan
🇩🇪 centurion	2026-05-22 07:53:30 (1 month ago)	Blocked by UFW on ns02 [80/tcp] Source port: 57373 TTL: 115 Packet length: 52 TOS: 0x00 This report ... show more Blocked by UFW on ns02 [80/tcp] Source port: 57373 TTL: 115 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 eishoof	2026-05-21 18:54:00 (1 month ago)	204.12.251.145 - - [20/May/2026:18:15:19 +0200] "POST / HTTP/1.1" 200 1910	Port Scan
🇹🇷 Threat.live	2026-05-21 11:25:02 (1 month ago)	Suspicious Connection Attempts	Brute-Force
🇺🇸 Starburst SysOp Team	2026-05-21 10:34:57 (1 month ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-iad5-2)	Hacking Bad Web Bot
🇩🇪 podril1ak2.ru	2026-05-19 18:50:31 (1 month ago)	Blocked by UFW [80/tcp] \| SPT: 61199 \| TTL: 104 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefi ... show more Blocked by UFW [80/tcp] \| SPT: 61199 \| TTL: 104 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.225.198.77

🇺🇸 136.118.230.194

🇰🇿 95.59.142.69

🇳🇱 91.92.40.13

🇬🇭 41.210.23.212

🇲🇽 189.194.140.170

🇺🇸 148.153.121.224

🇨🇳 125.36.68.227

🇨🇳 112.97.165.103

🇸🇬 104.215.180.121

🇸🇬 103.190.179.28

🇺🇸 91.230.168.224

🇹🇷 91.216.112.80

🇺🇿 84.54.71.153

🇨🇦 34.186.211.27

🇺🇸 2607:f8b0:4003:c19::124

🇭🇰 193.176.211.42

🇩🇪 167.94.145.29

🇺🇸 164.92.114.247

🇨🇲 154.72.169.190